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Synopsis 


Editor’s Note 

The goal of Open Systems Intercon- 
nection (OSI) is to enable dissimilar 
computers in multivendor environ- 
ments to share information transpar- 
ently. The OSI structure calls for 
cooperation among systems of differ- 
ent manufacture and design. With 
this capability, global digital net- 
works can become a reality. 


There are seven layers of the OSI 
model that communicate between 
one end system and another. The | 
layers cover nearly all aspects of in- 
formation flow, from applications- 
related services provided at the 
Application Layer to the physical 
connection of devices to the commu- 
nications medium at the Physical 
Layer. 
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Although all seven layers have long 
since been defined and ISO protocols 
ratified for each layer, the ISO com- 
mittees must keep refining and rede- 
fining specific sections of the model 
by rewriting existing definitions and 
adding new protocols. 


Report Highlights 

This report updates the OSI’s status 
at all seven layers; gives the status of 
OSI standards progress; compares 
OSI to other architectures, including 
ISDN, SNA, DECnet, MAP/TOP, 
and TCP/IP; rationalizes the need 
for standards testing and verifica- 
tion; profiles major testing organiza- 
tions; and outlines OSI Management 
standards and status. 
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Analysis 


The proliferation of computerized data processing 
systems in the late 1960s produced a need for com- 
patible data communications networks in the 
1970s. Several proprietary network architectures 
were developed for mainframe-to-terminal com- 
munications, including IBM’s SNA in 1974. Al- 
though many of these proprietary architectures 
were based on a layered model, none were compat- 
ible with any other. The CCITT’s X.25 host inter- 
face to the packet networks standard was ratified 
in 1976 but is not a complete network architecture. 
In 1977, the International Organization for Stan- 
dardization (ISO) formed ISO Technical Commit- 
tee 97 (TC97), Subcommittee 16 (SC16), to 
embark on a worldwide standardization effort and 
confront the issue of incompatibility head-on. The 
purpose of TC97/SC16 was to develop a model and 
define the protocols and interfaces required to sup- 
port an open system. The goal of Open Systems 
Interconnection (OSI) was, and still is, to enable 
dissimilar computers in multivendor environments 
to share information transparently. With this capa- 
bility, global digital networks can become a reality. 


The Open System 


The ISO defines a system as a set of one or more 
computers and associated software, peripherals, 
terminals, human operators, physical processes, 
information transfer means, etc., which form an 
autonomous whole capable of performing informa- 
tion processing and/or information transfer. An 
open system 1s one that obeys OSI standards in its 
communication with other systems. 

An application process is an element within a 
system that performs information processing for a 
particular application. The application process can 
be manual (a person operating a banking terminal), 
computerized (a program executing in a computer 
center and accessing a remote database), or physi- 
cal (a process control program executing in a dedi- 
cated computer attached to industrial equipment 
and linked to a plant control system). 


NOVEMBER 1991 


ISO Reference Model for 
Open Systems 
Interconnection (OSI) 


Datapro Reports on 
PC & LAN Communications 


The OSI structure calls for cooperation 
among systems of different manufacture and de- 
sign. This includes coordinating activities such as 
the following: 


e Interprocess communications—the synchroni- 
zation between OSI application processes and 
the exchange of information 


e Data representation—the creation and mainte- 
nance of data descriptions and transformations 
for reformatting data exchanged between sys- 
tems 


¢ Data storage—storage media, file systems, and 
database systems for providing access to and 
management of stored data 


e Process and resource management—how appli- 
cation processes are declared, initiated, con- 
trolled, and acquired 


e Integrity and security—information processing 
constraints that must be ensured during open 
systems operations 


e Program support—the definition, compilation, 
testing, linking, storage, and transfer of and ac- 
cess to programs executed by the application 
processes 


The OSI model is concerned only with the ex- 
change of information between open systems. 


The Layering Concept 

Layering is a basic structuring technique used in 
the OSI model. Each layer 1s composed of an or- 
dered set of subsystems, with logically related func- 
tions grouped together. The OSI model breaks 
down internetworking activities between systems 
into two distinct groups. Communications- 
oriented functions are separated from user- 
oriented functions; features which move 
information across a network are distinct from fea- 
tures which handle and format information. 

There are seven layers of the OSI model that 
communicate between one end system and another 
end system. The layers cover nearly all aspects of 
information flow, from applications-related ser- 
vices provided at the Application Layer to the con- 
nection of devices to the communications medium 
at the Physical Layer. Below the Physical Layer, 
the media itself corresponding to “Layer 0”’—such 
as wire, cable, or through-the-air communication— 
is currently not addressed by the model. 
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otandards Organizations and 
Testing Agencies 


Although standards are 
indispensable for com- 
puter internetworking, 
they are useless unless 
vendor claims of compati- 
bility can be tested and 
users can be assured of 
acquiring products that 
comply fully with the stan- 
dards. In general, vendor 
claims of standards com- 
patibility are suspect un- 
less verified by an 
impartial testing agency. 
Additionally, compatibility 
claims can mean different 
things to different people. 
For users, it is a good 
idea to probe vendor 
claims of standards com- 
patibility to determine 
what is compatible with 
what, and at what levels. 


several standards testing 
and verification bodies 
have been organized both 
here and abroad by ven- 
dor consortiums, govern- 
ment agencies, and 
independent organiza- 
tions. They have found 
that developing conform- 
ance specifications, pro- 
ducing testing suites, and 
conducting comprehen- 
sive testing is compli- 
cated, expensive, and 
time consuming. Regional 
differences can stymie 
attempts at verification. 
The trend for these orga- 
nizations, therefore, is to 
cooperate with each 
other, sharing resources 


and expertise. A primary 
objective is demonstrating 
interoperability among 
different vendors; i.e., 
proving that standards 
really work and fostering 
end-user interest. Many 
agencies have tried vainly 
to involve more end users 
but are backed primarily 
by the vendors. 


In the U.S., primary test- 
ing and certification agen- 
cies include the 
Corporation for Open 
Systems (COS), the Na- 
tional Institute of Science 
and Technology (NIST), 
and Bell Communications 
Research (Bellcore). Sev- 
eral smaller organizations 
and certain vendors, how- 
ever, also offer testing 
services. Europe is repre- 
sented by the Standards 
Promotion & Application 
Group (SPAG); Japan by 
the Promoting Confer- 
ence for OSI (POSI). Stan- 
dards organizations are 
listed below: 


American National Stan- 
dards Institute (ANSI) 
1430 Broadway 

New York, NY 10018 
(212) 642-4900 


ANSI X3 Secretariat 
Computer and Business 
Equipment Manufacturers 
Association (CBEMA) 
Suite 500, 311 First 
Street, NW 


Washington, DC 20001- 
2178 
(202) 737-8888 


Bell Communications Re- 
search (Bellcore) 

60 New England Avenue 
Piscataway, NJ 08854- 
4196 

(908) 699-2000 

Customer Service Hot 
Line: 

(800) 521-CORE 


Corporation for Open 
Systems (COS) 

Suite 400, 1750 Old 
Meadow Road 

McLean, VA 22102-4306 
(703) 883-2700 

Telex: WUI 6503157578 
MCI UW 


European Computer 
Manufacturers Associa- 
tion (ECMA) 

Rue du Rhone 114 
CH-1204 Geneva, Swit- 
zerland 

(+41) 22 735 36 34 
Telex: 413237 ECMA CH 


Electronic Industries As- 
sociation (EIA) 

1722 Eye Street NW, 
Suite 300 

Washington, DC 20006 
(202) 457-4900 


International Organiza- 
tion for Standardization 
(ISO) 

1, Rue de Varembe 
Case Postale 56 
CS-1211 Geneva 20, 
Switzerland 

(+41) 22 33 34 30 


international Telegraph 
and Telephone Consulta- 
tive Committee (CCITT) 
General Secretariat 
International Telecom- 
munications Union (ITU) 
Place des Nations 


CH-1211 Geneva 20, 
Switzerland 

(+41) 22 99 51 11 

Fax: (+41) 22 33 72 56 
Telex: 421 000 UIT CH 


Institute of Electrical and 
Electronics Engineers 
(IEEE) 

Headquarters 

345 E. 47th Street 

New York, NY 10017 
(212) 705-7900 

Fax (publications): (212) 
705-7682 


IEEE Service Center 
(published standards:) 
445 Hoes Lane, P.O. Box 
1331 

Piscataway, NJ 08855- 
1331 

(908) 981-1393 

Fax: (908) 981-9667 
Telex: 833-233 


OSINET 

Mr. Jerry Mulvenna, 
Chairman 

OSINET Steering Commit- 
tee 

NIST Building 225, Room 
B217 

Clopper Road 
Gaithersburg, MD 20899 


Standards Promotion & 
Application Group sa 
(SPAG) 

Avenue Louise 149, Box 7 
1050 Brussels, Belgium 
(+32) 2 535 08 11 

Telex: 20307 SPAG B 


National Institute of Stan- 
dards and Technology 
(NIST) 

U.S. Department of Com- 
merce 

Gaithersburg, MD 20899 
(301) 975-2000 
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> (Analysis continued) 


model. Application, Presentation, Session, Trans- 
port, Network, Data Link, and Physical Layers 
have been defined (see Table 1). The model repre- 
sented by Table 1 is only one end system, in this 
case the transmitting end; most networks have at 
least two end systems. In Table 1, information 
flows down from Layer 7 to Layer 1, and then out 
over a physical transmission medium. At the re- 
ceiving end, the information flows into another 
end system and up from Layer 1 to Layer 7, until it 
is received by a user. 

The seven layers can be divided into two 
functional groups: the Transport Platform (Layers 
1 to 4) and the Application Platform (Layers 5 to 
7). The Transport Platform’s function is to get data 
from one system to another without errors. The 
Application Platform’s function is to interpret the 
datastream and present it to the user in a usable 
form (see Figure 1). | 

Each layer contributes functions to the com- 
munications task. For example, the Link Layer en- 
ables communications across a single physical 
connection, while the Network Layer provides end- 
to-end routing and data relay. Services at the upper 


Figure 1. 
Application and Transport Divisions 
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Application 
Platform 


vi 
6 


Transport 
Platform 


NOVEMBER 1991 


Datapro Reports on 


ISO Reference Model for 
PC & LAN Communications 


Open Systems 
Interconnection (OSI) 


layer interface—providing connection to the next- 
higher layer—are provided by each layer, usually 
described by a service specification for the layer. 
Services at each layer are provided by a layer en- 
tity. Each layer entity communicates with its peer 
at the same layer on another system, providing ser- 
vices specified in the service specification. 

Layers are sometimes divided into sublayers, 


for several reasons. Layers often need sublayers to 


handle the service interface of the layer beneath it. 
This avoids “rewriting” the entire layer. For exam- 
ple, the Link Layer of the IEEE 802 Local Area 
Network (LAN) standards is divided into a Logical 
Link Control (LLC) sublayer and a Media Access 
Control (MAC) sublayer. The MAC sublayer de- 
pends on characteristics of the underlying physical 
layer. Layer independence and modularity are pro- 
moted by ensuring that layer entities on one system 
are not permitted to communicate with nonpeers 
on another OSI system. 

IBM’s SNA is also a layered architecture, fol- 
lowing rules of layering common to OSI and other 
layered architectures. Any layer may originate a 
message to fulfill its responsibilities. The message 
may not bypass any layer en route to its destina- 
tion. If a message leaves the node it will end up in 
another node at the same layer that originated the 
message. 

There are good reasons for layering: layering 
simplifies change; components inside a layer can 
be changed without affecting any other layers in 
that node. Layers are like structured programming— 
but for teleprocessing systems. Because there 
are rigid interfaces between levels, fewer peo- 
ple need to react to changes, allowing them to be 
implemented faster. There is no better way of 
achieving complex functions. Layering allows each 
network function to be made “transparent,” un- 
aware and independent of other functions at other 
layers, thus enabling any layer to be modified with- 
out changing the entire monolithic architecture. 

Each layer may support one of several differ- 


ent protocols designed for specific network applica- 


tions; the choice of a specific protocol is optional, 
allowing users to tailor networks to their own de- 
sign. Each layer defines functions crucial to the 
communications process at that layer, independent 
of the other layers. However, a layer may perform 
functions hinging on functions performed in the 
layers immediately above or below. A layer can 
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Figure 2. 
Message Movement among OSI Layers 


\ 


Application 


Presentation 


Session 


Transport 


Network 


Data Link 


Physical 


Transmission —— 
Media 


End System 


Message moves from Layer 7 through 
the other layers to reach Layer 7 
at the opposite end 


Network Node 


/ 


Application 
Presentation 
Session 
Transport 
ee Network 
Data Link 


Physical 


End System 


Intermediate nodes in an OSI network require only bottom-layer functions of the OSI model. Note how peer lay- 
ers communicate only with their peers; i.e., Layer 1 talks to other Layer Is but not to Layer 2s. 


only communicate with another device or network 
node at its peer layer. Messages exchanged between 
peer layers are “enveloped” with messages from 
- other layers and passed through these other layers 
on the way to their destination, picking up and 
then shedding these other protocol layers along the 
way. For example, if layer seven at one end system 
must send a message to layer seven at another, it 
must travel down through six layers at its own end 
and then up through six layers at the other, until it 
reaches layer seven at its opposite (peer) layer. 
Each network node (a network user, com- 
puter, terminal) 1s equipped with this layer mecha- 
nism. However, not all intermediate nodes need all 
seven layers. Network nodes, 1n particular, must 
only route and transmit data packets—functions at 
the bottom three layers of the OSI model. Layer 
four through seven functions are not required and 
therefore not included in network node software. 
Data packets processed in these nodes reach only 
Layer 3 and are then routed elsewhere (see Figure 
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2). Anode communicates with its peer in the node 
sending or receiving data. Interfaces within nodes 
allow them to accept, process, and route data. Data 
transfer is routed from Layer 7 down to Layer 1 at 
the transmitting node, then along the network to 
Layer | at the receiving node, and finally from 
Layer 1 up to Layer 7. Peer layers communicate by 
the same route. 

The message initiated at the transmitting 
node (Layer 7) is passed from layer to layer, each 
layer adding control information, if required, and 
acting in accord with control information from its 
peer in the receiving node. A fully prepared mes- 
sage enters the cable at Layer 1. The procedure is 
reversed at the receiving end. Each item of control 
information stops at its appropriate layer, and the 
message itself passes up to Layer 7. Data transfer 
essentially is a cumulating process at the transmit- 
ting node and a diminishing process at the receiv- 
ing node. 
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Layer Name 

7 Application 
6 Presentation 
5 Session 

4 Transport 

3 Network 

2 Data Link 

1 Physical 
The Layers 


A number of objectives were considered by the ref- 
erence model’s designers: to limit the number of 
layers to make the system engineering task of de- 
scribing and integrating the layers as simple as pos- 
sible; to create boundaries between layers at points 
where the description of services can be small and 
the number of interactions across each boundary is 
minimized; and to collect similar functions in the 
same layer. Table 1 summarizes the OSI Reference 
Model’s layers; more detailed descriptions follow 
for each layer. 


The Application Layer 

The Application Layer (Layer 7) is the highest 
layer, providing the means for the application pro- 
cess to access the OSI environment. Its function is 
to serve as the passageway between application 
processes using Open Systems Interconnection to 
exchange information; consequently, all applica- 
tion process parameters are made known to the 
OSI environment through this layer. 

All services directly usable by the application 
process (i.e., systems and applications management 
functions) are provided by the Application Layer. 
It differs from the other layers in that it does not 
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Purpose 


Applications and application interfaces for 
OS! networks. Provides access to lower 
layer functions and services. 


Formats data received from Layer 7; in- 
cludes terminal standards, display rules. 


Coordinates connection and interaction be- 
tween applications. Establishes a dialog, 
manages and synchronizes the direction of 
data flow, and terminates the session. 


Ensures end-to-end data transfer between 
applications, data integrity, and service 
quality. Assembles data packets for routing 
by Layer 3. 

Routes and relays data units among net- 
work nodes. 


Transfers data units from one network 
node to another over a transmission circuit. 
Ensures data integrity between nodes. 


Sends the bit stream to the transmission 
medium. 


provide services to a layer above it nor is it associ- 
ated with a service-access point. Some of the ser- 
vices provided by this layer, other than 
information transfer, are the following: 


Identifying intended communications partners 


Determining current availability of the in- 
tended partners 


Establishing the authority to communicate 
Agreeing on responsibility for error recovery 


Agreeing on procedures for controlling data 1n- 
tegrity 


The Application Layer actually consists of two sub- 
layers. The uppermost sublayer consists of Specific 
Application Service Elements (SASEs), such as 
message handling system (X.400), FTAM, Direc- 
tory Services (X.500), DTP, and Virtual Terminal 
(VT). The lower sublayer consists of Common Ap- 
plication Service Elements (CASEs), which provide 
specific services for the upper applications. Exam- 
ples of CASE protocols include Commitment Con- 
currency and Recovery Service Element (CCR) and 
Remote Operation Service Element (ROSE). 


The Presentation Layer 

The Presentation Layer (Layer 6) allows an appli- 
cation to interpret the meaning of information ex- 
changed. Information is formatted and translated 
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Layer 
7 
Application 


6 
Presentation 
5 

Session 


4 
Transport 


3 
Network 


2 
Data Link 


1 
Physical 


ISO 


8571 (FTAM) 
10021 (MHS) 
9041 (VT) 
10026 (DTP) 
9594 (DS) 
8613 (ODA) 
9579 (RDA) 
9596 (CMIP) 


8823 (connection) 
9596 (connectionless) 


8327 (connection) 
9548 (connectionless) 


8073 (TPO-TP4) 
(connection) 
8602/8072 
(connectionless) 
8208 (Layers 1-3) 
8348 (connection) 
8473 (connectionless) 
9542 (IS-IS) 

8878 (use w/8208) 
8880 (LAN) 

8881 (X.25 on LANs) 


7776 (LAPB) 
3309 (HDLC) 
8802.2-.7 (LAN) 
(IEEE 802.2-.7) 


9314 (FDDI) 
9110 (EIA-232D) 
4902 (EIA-449) 
2593 

4903 


CCITT 


X.400 


X.500 


T.410 Series, T.73 


X.226 


X.225 


X.224 


V.24, V.28 
V.24, V.28 
V.35 


X-Series interfaces, 
Other V-Series 


at this layer. Aspects of Layer 6 include data syn- 
tax, which is the data to be transferred between 
layers, and the presentation image syntax, which 1s 
the data structure that application entities refer to 
in their dialog, or the set of actions that may be 
performed on the data structure. 
Services provided to the Presentation Layer 


include the following: 


e Transforming data syntax, primarily code and 
character set conversion 


e Transforming and selecting the presentation 
image syntax, the adaptation and modification 
of the presentation image (the OSI view of the 


data structure) 


Functions within the Presentation Layer include 
session establishment request; data transfer; nego- 
tiation and renegotiation of data syntax and pre- 
sentation image syntax; special data transform- 


ations, such as compression; and session 
termination request. 
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X3.148, X3.139, X3.166 


The Session Layer 
The Session Layer (Layer 5) allows cooperating 

presentation entities to organize and synchronize 
their dialog and to manage data exchange. It pro- 
vides the following services: 


ECMA-40 
ECMA-82, -81, -90, -89 


Session-connection establishment—creation of 
an exchange between presentation entities 


Session-connection release 


Normal data exchange 


Quarantine service—in which data units sent 
by a presentation entity are withheld from the 
receiving presentation entity until released by 
the sending presentation entity 


Expedited data exchange 


Interaction management—allowing presenta- 
tion entities to take turns exercising control 


functions 


Session-connection synchronization 
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Table 3. OSI Network Management Standards 


Title 
CMIS/CMIP 


Common Management Information Service (CMIS) (IS 9595) 


CMIS CancelGet Addendum (AD 9595-1) 
CMIS Add/Remove Addendum (AD 9595-2) 


Support for Allomorphism (Amendment to CMIS) (CD 9595) 


Access Control (Amendment to CMIS) (CD 9595) 


Common Management Information Protocol (CMIP) (IS 9596) 


CMIP CancelGet Addendum (AD 9596-1) 
CMIP Add/Remove Addendum (AD 9596-2) 


Support for Allomorphism (Amendment to CMIP) (CD 9596) 


PICS Proforma (Amendment to CMIP) (CD 9596) 


OSI Systems Management Functions 

OSI Systems Management Overview (DIS 10040) 
Object Management Function (DIS 10164-1) 

State Management Function (DIS 10164-2) 

Attributes for Representing Relationships (DIS 10164-3) 
Alarm Reporting Function (DIS 10164-4) 

Event Management Function (DIS 10164-5) 

Log Control Function (DIS 10164-6) 

Security Alarm Reporting Function (DIS 10164-7) 
Security Audit Trail Function (CD 10164-8) 

Objects and Attributes for Access Control (CD 10164-9) 
Accounting Meter Function (CD 10164-10) 

Workload Monitoring Function (CD 10164-11) 
Confidence and Diagnostic Testing Classes, 


Test Management Function (N4078, 10164-X) 
Measurement Summarization (N4081, 10164-X) 
Response Time Monitoring (N4079, 10164-X) 
Software Management Function (10164-X) 


Time Management Function (10164-X) 


Structure of Management Information (SMI) 
Management Information Model (DIS 10165-1) 
Definition of Management Information (DIS 10165-2) 


Guidelines for Definition of Managed Objects (DIS 10165-4**) 


Generic Managed Objects (N4075) 


Current Status 


International Standard 
Addendum 
Addendum 

New Work Items 


New Work Items 


International Standard 
Addendum 

Addendum 

New Work Items 


New Work Items 


Draft International Standard 
Draft International Standard 
Draft International Standard 
Draft International Standard 
Draft International Standard 
Draft International Standard 
Draft International Standard 
Draft International Standard 
Committee Draft* 
Committee Draft* 
Committee Draft* 
Committee Draft* 
Committee Draft” 


Committee Draft* 
Committee Draft* 
New Work Item 


New Work Item 


Draft International Standard 
Draft International Standard 
Draft International Standard 
Working Draft 


“Draft proposals (DPs) are now referred to as Committee Drafts (CDs). 
**Document DIS 10165-3 was merged with DIS 10165-2 and will not appear in future standards listings. 


¢« Exception reporting—permitting the presenta- 
tion entities to be notified of exceptional situa- 


tions 
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Finalization Date 


Final 11/89 
Final 11/90 
Final 11/90 


DIS expected in 11/91; IS ex- 
pected in 11/92 


DIS expected in 11/91; IS ex- 
pected in 11/92 


Final 11/89 
Final 11/90 
Final 11/90 


DIS expected in 11/91; IS ex- 
pected in 11/92 


DIS expected in 11/91; IS ex- 
pected in 11/92 


IS 5/91 
IS 5/91 
IS 5/91 
IS 5/91 
IS 5/91 
IS 5/91 
IS 5/91 
IS 5/91 
DIS 4/91 
DIS 4/91 
DIS 4/91 
DIS 4/91 
DIS expected 8/91; IS expected 
8/92 


DIS expected 8/91; IS expected 


8/92 


DIS expected 8/91; IS expected 


8/92 


DIS expected 7/92; IS expected 


7/93 


DIS expected 8/92; IS expected 


8/93 


IS 5/91 
IS 5/91 
IS 5/91 


DIS registration dates to be 
determined 


An example of a working Layer 5 protocol outside 
the scope of OSI is the Department of Defense 
Transmission Control Protocol (TCP). 
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Title 


Specific Management Functional Areas (SMFAs) 
Performance Management (N4981) 

Accounting Management (N875R) 

Security Management (N4091) 

Fault Management (N4077) 

Configuration Management (N3311) 


Related Upper Layer Standards 
OSI Management Framework (IS 7498/4) 
File Transfer, Access and Management (FTAM) (ISO 8571) 


Association Control Service Element (ACSE) (ISO 8649, plus 
addendums) 


Remote Operations Service Element (ROSE) (IS 9072-1&2) 


The Transport Layer 
The Transport Layer (Layer 4) provides transpar- 
ent data flow between session entities, freeing the 
Session Layer from responsibility for cost-effective 
and reliable data transfer. Layer 4 provides infor- 
mation interchange according to a user-specified 
reliability level and end-to-end control. Transport 
protocols transfer information from one end of a 
physical connection to another and ensure that it is 
delivered correctly. Layer 4 protocols are used after 
a route has been established through the network 
by the network-layer protocol. 

The services provided by this layer include 
the following: 


e Transport-connection establishment to com- 
plete a connection between session entities 


e Data transfer, in accordance with the agreed 
quality of service 


e Transport-connection release 


The Transport Layer is the most defined of the up- 
per four layers. The European Computer Manufac- 
turers Association (ECMA) has defined this layer 
in its Transport Protocol standard, ECMA-72. This 
standard has gained the support of a number of 
North American and European computer manufac- 
turers. An end-to-end data transport protocol out- 
side the scope of OSI is the Department of Defense 
Internet Protocol (IP). 
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Current Status 


Working Draft 
Working Draft 
Working Draft 
Working Draft 
Working Draft 


Finalization Date 


Next milestone to be determined 
Next milestone to be determined 
Next milestone to be determined 
Next milestone to be determined 
Next milestone to be determined 


International Standard Final 4/89 

International Standard Final 10/88 
International Standard Final 12/88 
International Standard Final 11/89 


The Network Layer 
The Network Layer (Layer 3) provides the means 
to establish, maintain, and terminate connections 
between systems. Its basic service is providing 
transparent data transfer between transport enti- 
ties. 

The services provided by this layer encom- 
pass the following: 


e Establishing network connections for transport- 
ing data between transport entities through net- 
work addresses 

e Identifying connection endpoints 

e Transferring network service data units 

e Noting errors for reporting unrecoverable errors 
to the transport layer 

e Sequencing network control data units 

¢ Flow control 


e Releasing the network connection 


The Data Link Layer 

Data Link Layer 2 provides the procedural and 
functional means to establish, maintain, and re- 
lease data link connections between two network 
nodes or network entities and to transfer data 
frames (or packets). This layer also detects and 
may correct errors that occur in the physical layer. 
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Services provided by the Data Link Layer to 
the Network Layer include data link connection, 
sequencing, error notification, flow control, and 
data unit transfer. 


The Physical Layer 
The lowest of the OSI layers is Physical Layer 1. It 
provides the electrical, mechanical, functional, and 
procedural characteristics for activation, mainte- 
nance, and deactivation of a physical connection. 
Physical Layer standards specify physical inter- 
faces (connectors) connected by a physical me- 
dium. 

Services provided by this layer include the 
following: 


¢ Activating and deactivating physical connec- 
tions 


° Data circuit identification 
e Sequencing 


¢ Transmitting physical service data units either 
synchronously or asynchronously 


e Fault condition notification 


Abstract Syntax Notation One (ASN.1) 

ASN.1 is a specification language adopted for the 
OSI Reference Model, giving standards developers 
a common method for defining protocols and re- 
lated standards. ASN.1 is somewhat analogous to 
grammatical rules defining the English language. 
Just as English grammar specifies notation (punc- 
tuation symbols) and word classifications (such as 
nouns and verbs), ASN.1 specifies a “grammar” 
and rules that help standards developers define 
complex data types in terms of simple building 
blocks. 

ASN.1 was derived from the Backus-Naur 
Form, used to describe programming languages 
such as Pascal and Ada. ASN.1 was first formally 
described and published in 1984, in the CCITT 
X.409 standard entitled “Message Handling Sys- 
tems: Presentation Syntax and Notation.” It is now 
described (in less readable fashion) in two later 
documents: CCITT X.208 (ISO 8824), entitled 
“Specification of Abstract Syntax Notation One 
(ASN.1),” and X.209 (ISO 8825), ““Basic Encoding 
Rules for Abstract Syntax Notation One (ASN.1).” 

According to ASN.1, each fragment of infor- 
mation must possess a type and a value. For exam- 
ple: 
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¢ Device-Status could be a type (in this case, it 1s 
a Boolean type) 


e Zero or One are the possible values 
This is specified in ASN.1 notation as such: 


Device-Status ::= Boolean 
Boolean ::= 011 


This is a very simple example; ASN.1 is a powerful 
grammar, capable of specifying very complex data 
types. Hence, it will continue to be the grammar of 
choice for specifying open systems standards and 
protocols. 


OSI Standards Progress 

The primary responsibility for developing OSI 
management standards in the United States rests 
with American Standards Committee (ASC) 
X3T5.4. There are four stages in the development 
cycle: working paper, committee draft (CD), previ- 
ously known as a draft proposal), draft interna- 
tional standard (DIS), and international standard 
(IS). A working paper is developed in the first 
stage. When it matures and contains well- 
developed technical concepts, it is registered as a 
CD. Passage advances the CD to the DIS level, and 
the document is considered sufficiently stable to 
serve as the basis of initial implementations. At the 
DIS level, the document is distributed for a 180- 
day ballot.-The DIS may require multiple ballots. 

A successful ballot elevates the DIS to the level of 
IS and completes ISO’s process. 

The entire process usually takes between four 
and eight years. A list of standards organizations 
associated with the OSI Reference Model is given 
at the end of this report. 


The Evolution of OSI Committees 

In the spring of 1977, ISO Technical Committee 97 
(TC97) formed a special subcommittee (SC16) 
charged with developing an architectural model 
that would extend from applications-layer commu- 
nications clear down to the connection with the 
physical interface. The first draft of the seven-layer 
OSI Reference Model was completed in 1978. Be- 
tween 1978 and 1983, the Basic Reference Model 
and many of the standards for the individual layers 
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approached or attained draft international stan- 
dard status. By the end of 1984, SC16 was reorga- 
nized to form Subcommittee 21 (SC21). Working 
groups within SC16 were also realigned. 

The OSI Basic Reference Model became an 
international standard in 1984. During 1985, a 
number of vendors demonstrated products that 
implemented these standards and, by the end of 
1986, many of these products were commercially 
introduced. 

In July 1987, the Joint Technical Committee 
for Information Technology (JTC1) was formed 
when ISO/TC97 joined forces with Technical 
Committee 83 (TC83) of the International Electro- 
technical Commission (IEC). The IEC is a coali- 
tion of industrial standards bodies that is co- 
located with the ISO in Geneva, Switzerland. The 
new JTC1 held its first meeting in 1987. The stan- 
dardization activities of SC21 report to JTC1. 

SC21 is composed of member bodies (MBs) 
from 23 different countries. Each MB has its own 
national standards organization; for example, 
ANSI represents the United States in JTC1. The 
individuals or “national correspondents” compris- 
ing the MB delegations come from different groups 
including user organizations, manufacturing firms, 
government agencies, and common carriers or 
PTTs. As such, they bring varying perspectives and 
concerns to the committee sessions. 

When an OSI committee or working group 
produces a document such as a CD, the document 
1s circulated among the MBs for a vote and to the 
liaison organizations (LOs) for review. LOs are in- 
dependent organizations which also have a vested 
interest in OSI development. LOs provide com- 
ments on the content of OSI documents but do not 
have voting privileges. 


Status of OSi Protocols 

Protocol standards for all seven layers of the OSI 
model have been approved; however, OSI commit- 
tees are refining and extending some standards as 
required and may add new standards at specific 
layers (particularly Layer 7). Additionally, other 
standards groups—such as the CCITT, ANSI, and 
IEEE—may adopt OSI protocol standards as their 
own and vice versa. Consequently, many OSI stan- 
dards are known by more than one standard desig- 
nation. Table 2 shows some major ISO protocols 
approved for each OSI layer and lists correspond- 
ing appellations from ANSI, the CCITT, and the 
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European Computer Manufacturers Association 
(ECMA), where applicable. 


OSI Applications Standards 

ISO committees are working hard at Layer 7, the 
Application Layer. In fact, OSI application stan- 
dards are perceived as potentially powerful and 
versatile and are the driving force for OSI market 
acceptance. We devote considerable space review- 
ing some of the most important ones here. 

In particular, the ISO electronic mail stan- 
dard for message handling systems (MHSs)—or 
CCITT X.400—1is becoming popular in commer- 
cial implementations. Two versions, one in 1984, 
and another in 1988, are draft international stan- 
dards that have not been ratified. The standard 
was given a big boost in 1989, when the Aerospace 
Industry Association (AIA) adopted X.400 to inter- 
connect its diverse electronic mail networks. Gate- 
ways to proprietary E-Mail systems were also 
developed that year, and dozens of vendors have 
rolled out X.400-based products. Most public 
E-Mail carriers have also adopted the standard and 
are migrating to the 1988 version. 

In addition, the ISO is adapting X.400 as the 
message medium for electronic data interchange 
(EDI). In this context, X.400 would be used as the 
communications method to store and forward 
trade documents and business forms conforming to 
ANSI X12, the European EDIFACT, and de facto 
EDI standards. 

One component of successful E-Mail internet- 
working is directory services (DS), commonly 
known as CCITT X.500. X.500 specifies an online 
directory for message communications, ultimately 
allowing network providers to map a common, in- 
terconnected directory of worldwide users. X.500 
dictates naming conventions, how users access di- 
rectory information, and what services are avail- 
able. 

Since the 1988 standard is not flexible, SC21 
WG4 is working to ease the transition to the new 
1992 version. Older 1988 X.500 systems will re- 
quire a software modification to work with the 
1992 version. Realistically, the vision of a world- 
wide messaging directory probably will not be real- 
ized until the late 1990s. 

The OSI protocol pair for office automation, 
Office Document Architecture (ODA) and Office 
Document Interchange Format (ODIF), has been 


an international standard since 1988 (ISO 8613). It 
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ISDN functions allocated according to layering principles of Recommendation X.200. 


is also specified in the U.S. government’s GOSIP 
standard. ODA and ODIF facilitate the exchange 
of office documents—such as letters, memoranda, 
and business reports—among dissimilar systems. 
Moreover, the standard specifies the formatting 
and exchange of compound documents—those 
containing combinations of text, images, and 
graphics. Several ISO working groups are attempt- 
ing to strengthen and extend the standard in such 
areas as the inclusion of audio, spreadsheet data, 
color graphics, document security, and various lay- 
out and presentation styles. 

The OSI standard for sending and sharing 
data files—File Transfer, Access, and Management 
(FTAM)—1s also a finalized international stan- 
dard. It was developed from networking efforts in 
the manufacturing industry and is a Layer 7 com- 
ponent of the Manufacturing Automation Protocol 
(MAP). Although FTAM is spreading quickly in 
Europe, it is also making some progress in domes- 
tic business applications. The file protocol used 
with TCP/IP—File Transfer Protocol (FTP)—is 
well established in the U.S., however, and generally 
more popular than FTAM. SC21 is working on an 
enhancement to FTAM, and it plans to establish 
conformance testing guidelines in the near future. 


NOVEMBER 1991 


The Layer 7 protocol for network manage- 


ment, Common Management Information Proto- 


col (CMIP), was approved as a draft standard in 
late 1989. CMIP itself is merely a way of commu- 
nicating between the ‘““management process” and 
management agents at each lower layer of the OSI 
model. The real work of managing network pro- 
cesses is located within the managed objects at in- 
dividual OSI layers; in other words, each layer 
must have its own network management system, 
which OSI does not specify. CMIP allows a central- 
ized management process to either modify the 
value of an attribute or request its value (read its 
status) at each of the layers. Definitions and de- 
scriptions of management structures and managed 
information are contained in other OSI standards 
yet to be completed. (For more information, see 
the OSI Management section featured later in this 
report.) 

Other Layer 7 protocols in various develop- 
ment stages include distributed Transaction Pro- 
cessing (TP), currently a committee draft designed 
to interconnect different transaction computing 
systems across OSI networks; Remote Database 
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Access (RDA), a committee draft describing a pro- 
tocol for integrating database management sys- 
tems; and Manufacturing Message Specification 
(MMS), ISO 9506, a manufacturing protocol that 
requires extensions for specific manufacturing de- 
vice types. 


Middle Layer Protocols 

During 1987 and 1988, the ISO finalized protocol 
standards for middle layers 4, 5, and 6. These stan- 
dards were based on a previous agreement that all 
connections would conform to a connection- 
oriented method of establishing circuits. 

Every layer of the OSI Reference Model, ex- 
cept the Physical Layer, supports connection and 
connectionless mode. Connection-oriented service 
requires a connection establishment phase, a data 
transfer phase, and a connection termination 
phase; a logical connection is set up between end 
systems prior to data exchange. These phases de- 
fine the necessary sequence of events for successful 
data transmission. Connection-oriented service 
capabilities include data sequencing, flow control, 
and transparent error handling. 

In a connectionless service, such as new 
Switched Multi-megabit Data Service (SMDS), 
each Protocol Data Unit is independently routed 
to the destination; no connection establishment 
activities are required, since each data unit is inde- 
pendent of the previous or subsequent one. 
Connectionless-mode service transfers data units 
without regard to establishing or maintaining con- 
nections. In connectionless mode, transmission 
delivery is uncertain due to the possibility of er- 
rors. This appears contrary to the goal of network 
design—users want to ensure that messages reach 
their destination. In reality, connectionless-mode 
communication simply shifts responsibility for 
message integrity to a higher layer, which checks 
integrity only once, rather than requiring checks at 
each lower layer. Alternatively, each data unit 
might contain the error recovery mechanism. 


Lower Layer Protocols 

Lower layer OSI protocols for layers 1 through 3 
are well-defined veterans and in many cases bor- 
rowed from existing EIA, IEEE, or CCITT stan- 
dards. Connectionless communications at the 
lower layers of the OSI model is well established 
and is found, for example, in local area networks 
(LANs) and metropolitan area networks (MANS). 
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While the original OSI model—described in ISO 
7498—was connection oriented, the ISO foresaw 
the need for connectionless service and issued an 
addendum to that protocol (ISO 7498/AD1). The 
ISO is now working to update the Connectionless 
Addendum, and CCITT SG VII pursues a parallel 
process. The CCITT, however, has been reluctant 
to insert connectionless-mode data transmission 
concepts into CCITT X.200—its version of the 
OSI model. The ISO standard for Network Layer 
service, ISO 8348, contains connectionless service 
(in AD 1) in addition to the connection mode. 


The Government’s GOSIP Standard 
In 1979, the National Bureau of Standards (now 
the National Institute of Standards and 
Technology—NIST) initiated a program to support 
U.S. government standards for interoperable data 
communications. It chose to develop a standard 
based on the ISO’s OSI Reference Model, named 
the Government OSI Protocol (GOSIP). Since Au- 
gust 1990, NIST has mandated GOSIP as a federal 
information processing standard (FIPS). All federal 
agencies must conform to GOSIP in procuring net- 
working products. According to NIST, the stan- 
dard will be updated every year, and each new 
version will be compatible with the preceding one. 

GOSIP is also expected to accelerate the de- 
velopment of OSI standards and products for the 
private sector. As the largest user of information 
processing systems and services in the world, the 
federal government greatly influences vendors in 
the computer and communications industries. The 
need for government GOSIP compliance will spur 
the development of OSI protocols and software 
products. 

GOSIP Version 1 specifies the following pro- 
tocols for each OSI layer: 


e Application Layer 7: File Transfer, Access, and 
Management (FTAM); X.400 Message Han- 
dling System (MHS); and the Association Con- 
trol Service Element (ACSE) 


e Presentation Layer 6: ISO 8823/CCITT X.226 
e Session Layer 5: ISO 8327/CCITT X.225 


e Transport Layer 4: ISO 8073, Transport Proto- 
col Class 4 (TP4) 


e Network Layer 3: ISO 8473 Connectionless Net- 
work Layer Protocol (CLNP) 
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¢ Data Link Layer 2: ISO 3309 (HDLC); ISO 
8802.2-5/IEEE 802.2-5 


e Physical Layer 1: GOSIP does not mandate spe- 
cific physical interface standards but suggests 
standard interfaces such as EIA RS-232-C for 
transmission speeds up to 19.2K bps and 
CCITT V.35 for speeds above 19.2K bps 


GOSIP Version 2.0 became mandatory in August 
1991. It adds the following protocols to the existing 
GOSIP model: 


¢ Application Layer 7: Basic Class Virtual Termi- 
nal (VT), ISO 9040, ISO 9041, ISO 9040 AD1, 
and ISO 9041. Office Document Architecture 
(ODA), ISO 8613-8. 


e Transport Layer 4: Connectionless Transport 
Service, ISO 8602. 


e Network Layer 3: Connection-Oriented Net- 
work Service for ISDN or X.25 networks, ISO 
8348 and 8348/AD1. Intermediate System to 
Intermediate System (IS-IS) intradomain rout- 
ing, ISO 9542. Integrated Services Digital Net- 
work (ISDN), CCITT 1.451 and Q.931. 


¢ Data Link Layer 2: ISDN CCITT 1.441 and 
Q.921 (Link Access Protocol D—LAPD). 


By supporting ISDN, Version 2.0 will also support 
CCITT X.25 packet interfaces and IEEE 802.2 to 
802.6 LAN networks. GOSIP Version 3.0, which 
becomes mandatory in August 1992, adds OSI net- 
work management, X.500 directory services, the 
Fiber Distributed Data Interface (FDDI) standard, 
and Open Document Architecture (ODA). Com- 
plete GOSIP details can be obtained from NIST 
publications Government Open Systems Intercon- 
nection Profile Users’ Guide (SP 500-163) and Gov- 
ernment Open Systems Interconnection Profile 
(FIPS PUB 146). 


OSI Security | 

By definition, an open system is one that encour- 
ages communications between different applica- 
tions or users. Unfortunately, an open system can 
also encourage illegal eavesdropping and informa- 
tion theft or destruction. Recently, notorious ex- 
amples of white-collar crime, corporate espionage, 
and network intrusions by computer worms and 
viruses have alarmed information processing pro- 
fessionals and raised a general awareness of com- 
puter security issues. The concepts of information 
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security and open systems are antithetical; never- 
theless, the ISO has taken steps to provide a secure 
environment within the OSI Reference Model. 

International Standard 7498, Part 2 addresses 
a security architecture within the general OSI 
model. It describes security measures that can be 
provided by specific layers in the model. Specific 
security standards are not yet defined, however, 
but are under study by working group JTC1, Sub- 
committee 27 for Information Technology Security 
Standards, plus other subcommittees. The U.S. 
participant in this process is ANSEs X3 Commit- 
tee. 

SC21, concerned with maintaining and defin- 
ing the upper three layers of the OSI Reference 
Model, met in May 1991, in Arles, France, to stabi- 
lize several network management and security 
standards. The Security model is composed of six 
frameworks that work together across all seven lay- 
ers of the OSI Reference Model: authentication, 
access control, security audit, nonrepudiation, con- 
fidentiality, and integrity. SC21 is working to es- 
tablish two of the six security standards as Draft 
International Standards (DISs), and the remaining 
four standards, which are working drafts, will 
progress to CD status. 


OSI and Other Network Architectures 


OSI and ISDN 

Functioning as the international voice of the tele- 
phone industry, the CCITT worked independently 
of ISO to develop its Integrated Services Digital 
Network (ISDN) technology. On the other hand, 
CCITT and ISO efforts are closely related because 
of expanding digital telephone networks and the 
merging of voice and data. 

Increasingly, the OSI Reference Model and 
ISDN overlap. The ISO has adopted versions of 
CCITT X.21 and X.25 standards for the lower lay- 
ers of the OSI model. ISDN functions are de- 
scribed in terms of the seven-layer OSI model in 
the CCITT’s Recommendation X.200 (see Figure 
3). Altogether, about 10 standards adopted by both 
CCITT and ISO are identical, except for introduc- 
tory paragraphs and identification numbers. 

ISDN standards are now mapped to the OSI 
Reference Model and occupy its lower layers. Spe- 
cific network applications, such as network man- 
agement and electronic mail, occupy the higher 
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OSI layers and can be integrated on top of ISDN 
protocols in telephony networks. ISDN will pro- 
vide a more versatile communications medium for 
integrating telephony and data processing. The 
U.S. government has already specified ISDN pro- 
tocol options for its GOSIP network architecture, 
which is modeled on OSI. NIST has successfully 
tested ISDN as a transport subnetwork for higher 
layer OSI protocols. ISDN is expected to be imple- 
mented throughout the public telephone network 
by late 1992. OSI and ISDN are complementary 
standards that will allow effective internetworking. 


OSI and Proprietary Architectures 

Until 1976, the only de facto network standards 
were those developed by IBM for its Systems Net- 
work Architecture (SNA). That year, however, 
CCITT introduced its X.25 standard for host 
interface-to-packet networks, and Digital Equip- 
ment Corp. brought out its Digital Network Archi- 
tecture (DNA). When the ISO defined its OSI 
Basic Reference Model (ISO 7498 and 7498/AD1) 
in 1979, users had a non-IBM alternative for the 
first time. The purpose of the OSI model— 
interoperability in a multivendor environment— 
was fundamentally different from the proprietary 
nature of SNA. 

Although OSI and SNA are both seven-layer 
network architectures, the layers do not match ex- 
actly and are incompatible. At first, IBM paid lip 
service to customer requests for OSI functionality. 
The vendor did not embrace OSI within SNA; in- 
stead, it provided an OSI gateway between SNA 
and other non-SNA networks. Like most gateways, 
this solution proved unwieldy and unsatisfactory. 
IBM also provided partial OSI solutions at various 
layers, such as X.25 connectivity at Layer 3 and 
below. Another interim OSI product was the Open 
Systems Message Exchange (OSME), an E-Mail 
package conforming to CCITT X.400. 

Increasingly, pressure from customers de- 
manding open, nonproprietary platforms has 
forced IBM and other major companies, such as 
Digital Equipment Corp. and NCR, into a main- 
stream OSI approach. 

In 1988, IBM announced OSI/Communica- 
tions Subsystem, mainframe-based (MVS) soft- 
ware supporting layers 3 to 6 OSI protocols in 
an SNA environment. In 1989, both IBM and 
Digital Equipment joined in the OSI/Network 
Management Forum, a group that was formed to 


© 1991 McGraw-Hill, Incorporated. Reproduction Prohibited. 
Datapro Information Services Group. Delran NJ 08075 USA 


745-115 
Technology Reports 


study interoperability among network management 
systems. In 1990, IBM delivered Release 1.1 of its 
OSI Communications Subsystem supporting OSI 
layers 3 to 6 protocols in a multivendor environ- 
ment and announced System View, an OSI-based 
network and systems management architecture. 

IBM now supports three major networking 
standards: OSI, TCP/IP, and FDDI. However, in 
early 1991, the company announced that full de- 
ployment of its System View will be delayed until 
1994 or 1995. 

This year, after delaying Phase V product in- 
troduction, Digital Equipment introduced a new 
networking architecture for incorporating OSI into 
DECnet, called Advantage-Networks. Digital de- 
signed Advantage-Networks to replace DECnet/ 
OSI Phase V. The new architecture enables users to 
transmit data from among OSI, TCP/IP, and DEC- 
net applications and network management is sup- 
ported with Digital’s Enterprise Management 
Architecture (EMA). 

In the past, relatively smaller vendors were 
generally more amenable to adopting OSI stan- 
dards. Standard Telephone and Cable/Inter- 
national Computers, Ltd. (STC/ICL), for 
example, was one of the first European manufac- 
turers to ensure that American and European stan- 
dards efforts are coordinated. STC/ICL is a British 
information systems firm that perceives adoption 
of OSI standards as a way to increase the applica- 
bility of its own products on an international level. 

NCR is expected to roll out its OSI-based 
router in 1992, as well as its OSI-based Communi- 
cations Processor software for the 56X5. The com- 
pany was supposed to have made them available 
last April, just before the introduction of its new 
System 3600 parallel processor. However, develop- 
ment problems have delayed delivery until next 
year. All of NCR’s products are based on its Open 
Cooperative Computing Architecture (OCCA), 
which provides for the coexistence and informa- 
tion exchange among OSI, SNA, and TCP/IP net- 
works. OCCA will be the platform used by AT&T 
and NCR to achieve global networking. 


OSI and MAP/TOP 

The Manufacturing Automation Protocol (MAP) 
and Technical Office Protocol (TOP) were origi- 
nally developed by General Motors and Boeing 
Computer Services, respectively, to automate man- 
ufacturing functions on the factory floor and in the 


NOVEMBER 1991 


745-116 
Technology Reports 


“back office.”’ Both are based on the OSI Refer- 
ence Model, using formal standards for each layer 
where possible. MAP, in particular, is probably the 
best-known example of a formal multilevel proto- 
col and has achieved moderate industry accep- 
tance. Many vendors now offer MAP 3.0 products, 
but these compete with proprietary “‘shop floor”’ 
automated factory solutions. 

Today, manufacturing networking standards 
are directed by the MAP/TOP users group. MAP 
Version 3.0 was released in June 1988 and will re- 
main free from major changes until 1994. Version 
3.0 added a Presentation Layer to the protocol and 
implemented a version of the Manufacturing Mes- 
sage Specification (MMS), the protocol for trans- 
ferring factory and robotics information, ISO 
9506. The ISO is currently working to extend 
MMS in support of realtime applications. Other 
Layer 7 protocols specified are FTAM, Network 
Management, and Directory Service. Middle layers 
implement ISO connection-oriented protocols, al- 
though these must be bypassed for time-critical 
applications. At the lower transport layers, MAP 
specifies the IEEE 802.4 token bus system employ- 
ing a Type F coaxial connection to a 75-ohm cable. 


OSI and TCP/IP 

Transmission Control Protocol/Internet Protocol 
(TCP/IP) was developed by the U.S. government’s 
Defense Advanced Research Projects Agency 
(DARPA) for its research network, ARPANET. By 
1986, TCP/IP had gained a following of commer- 
cial users seeking a protocol that could be used as a 
common denominator for multivendor computer 
networks. TCP and IP are actually two separate 
protocols, occupying middle layers number four 
(transport) and number three (network), respec- 
tively, of the OSI Reference Model. 

TCP/IP has been implemented on almost ev- 
ery type of computer and 1s especially successful in 
commercial Ethernet LAN environments. The rea- 
son for TCP/IP’s popularity is that it is a relatively 
simple, proven system for internetworking. Its han- 
dling of the connection-oriented/connectionless 
dilemma, which can be problematic in OSI, is 
straightforward and easy to implement. OSI pro- 
vides a richer set of network options, but these may 
not be compatible in different networks. Users can- 
not communicate across different networks if they 
implement different options at these layers. 


NOVEMBER 1991 


Datapro Reports on 
PC & LAN Communications 


ISO Reference Model for 
Open Systems 
Interconnection (OSI) 


Already, some proprietary stripped-down ver- 
sions of OSI have been developed that resemble 
TCP/IP, and some pundits believe that OSI itself 
will evolve to resemble TCP/IP in the future. TCP/ 
IP’s future could have been jeopardized, since the 
U.S. government mandated OSI compliance in 
government procurements, had it not been for No- 
vell’s introduction earlier this year of a new ver- 
sion of its NetWare network operating software 
that supports TCP/IP. 

A majority of users still use TCP/IP networks 
for LAN interconnectivity. However, the consen- 
sus is that TCP/IP is not the ultimate solution—a 
feat attributed to OSI. The trend is toward a migra- 
tion to OSI-based applicaions running on a TCP/IP 
infratsructure. As a result, more vendors, including 
Unisys and Amdahl, are introducing products that 
support multiple protocols. 


Testing and Verification Agencies 


The Corporation for Open Systems (COS) 
During the late 1970s and early 1980s, vendor sup- 
port for the OSI model ranged from wholehearted 
to indifferent. By 1985, however, it became appar- 
ent that cooperation among vendors—and users— 
would be critical to the success of open standards. 
That year, major U.S. vendors officially an- 
nounced their support and formed the Corporation 
for Open Systems (COS) to promote implementa- 
tion of OSI standards. 

COS is a nonprofit research and development 
consortium located in McLean, VA, with an an- 
nual budget of $10 million. Its stated purpose is to 
work toward worldwide information systems 1n- 
teroperability. Its mission is to open worldwide 
markets for new OSI and ISDN products through 
certification, by developing conformance test prod- 
ucts, and by cooperating with other international 
organizations. COS is not in the business of rein- 
venting standards. It works with existing standards 
organizations to accelerate the implementation of 
present standards by testing and certification. 

COS currently lists about 60 full-fledged 
member companies composed primarily of infor- 
mation technology vendors such as Apple Com- 
puter, AT&T, Digital Equipment Corp., Hewlett- 
Packard, IBM, Intel, Sun Microsystems, Texas 
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Instruments, and several software and LAN ven- 
dors. The list also includes several federal govern- 
ment agencies and a few large end users. 

Members are committed to accelerate OSI 
and related standards and to assess how vendors 
can best supply end users with OSI and ISDN solu- 
tions; they are afforded several privileges not avail- 
able to nonmembers. There are three types of 
memberships: 


1. Regular membership, with an annual fee of 
$25,000 


2. Corporate Research membership, for corpora- 
tions with revenues in excess of $25 million, 
with an annual fee of $25,000 


3. Senior Research membership, for corporations 
with revenues in excess of $150 million, with 
an annual membership fee of $25,000 and an 
annual research fee of $175,000. 


Besides these three categories, COS provides an 
Affiliate Associate Program currently consisting of 
over 40 universities, foundations, associations, and 
nonprofit organizations. 

COS’ major activity is developing and admin- 
istering the COS Mark Licensing Program, which 
is crucial to the COS mission. Informally known as 
the “gold dot,”’ the COS Mark was developed with 
the aid of Underwriters Laboratories (UL). It is a 
“seal of approval,” providing impartial verifica- 
tion to users that OSI and ISDN products conform 
to standards and ensure multivendor interoperabil- 
ity. COS awards the mark to products that meet 
COS requirements and pass a set of COS conform- 
ance tests. Since OSI contains many optional 
classes, subsets, and parameters, conformance tests 
are conducted on a COS Stack Specification—a 
specific profile of optional OSI protocols. 

COS conformance tests are available through 
three avenues: at an on-site COS testing lab, 
through licenses issued to third-party testing orga- 
nizations, and through licenses issued to vendors. 
In addition to OSI, the COS Conformance Testing 
Laboratory offers conformance test services for the 
following protocols: 


¢ 802.3 CSMA/CD 

e 802.4, Layer 1 and Layer 2 
e X.25 (OSI 8882) 

e Internet 

e Transport 
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Testing services cost $1,000 per day. Conformance 
test licenses are available for the protocols men- 
tioned above, plus 10 specific MAP/TOP proto- 
cols, ranging from $5,500 to $135,000 per protocol 
(with discounts for multiple licenses). 

COS has been unsuccessful in attracting end- 
user members and is criticized for moving too 
slowly and for not being impartial. COS members 
represent diverse interests but “theoretically” 
share a common vision of worldwide interoperabil- 
ity as well as a recognition of the potential profit- 
ability of open systems products. COS member 
representatives are working together to translate 
these ideals into several goals. Nevertheless, COS 
members cannot always reconcile their business 
interests with support of open standards. 

Accordingly, COS has forged partnerships 
with similar testing and conformance groups 1n the 
U.S. and abroad. It has relationships with the 
MAP/TOP Users Group, NIST, ANSI, SPAG, 
POSI, and the Interoperability Technology Associ- 
ation for Information Processing (INTAP) of Ja- 
pan. With ODA becoming mandatory for federal 
information system procurements after August 
1992, the need for OSI conformance testing will 
increase immensely in the coming years. Recently, 
COS has shifted emphasis from that of a testing 
laboratory to producing a model for third-party 
testers. 

In 1991, COS announced an industry-wide 
consensus to develop and deliver ISDN capabill- 
ties in the public switched telephone network by 
late 1992. ISDN will be deployed based on stan- 
dard technical specifications and implementation 
agreements. Known collectively as National ISDN 
1, the technical specifications were developed by 
Bellcore in conjunction with major industry equip- 
ment and service providers. 


National Institute of Standards and Technology 
(NIST) | 

NIST, formerly the National Bureau of Standards 
(NBS), is a branch of the U.S. Department of Com- 
merce. It develops federal information processing 
standards for ISDN and OSI and sponsors the OSI 
Implementers Workshop (OIW) and several OSI 
special interest groups. In 1979, NIST developed 
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formal standards description techniques and proto- 
col test methods. It is grappling with the govern- 
ment’s role in standardization, and whether that 
role should be increased to meet the challenges 
posed by international competition. Unlike other 
countries, the U.S. does not implement laws for 
standards conformance—a concept vigorously op- 
posed by U.S. industry. 


NIST and IEEE 

NIST helps to sponsor an experimental OSI net- 
work for OSI product vendors and users, called 
OSINET. Originally formed in 1984 to test MAP 
protocols, OSINET is a packet switched network 
with about 40 U.S. nodes. It allows two vendors to 
voluntarily perform brief interoperability tests, 
modeled after OSI standards for conformance test- 
ing. Abbreviated test results are registered and 
made available to end users through an online da- 
tabase. Complete testing details and results can be 
obtained from OSINET. 

OSINET costs are maintained by the partici- 
pating vendors, including Digital Equipment 
Corp., Hewlett-Packard, IBM, NCR, and Unisys. 
NIST is a full member, and the network’s chairper- 
son is a NIST employee. In 1989, OSINET and 
equivalent networks from Europe, Japan, Austra- 
lia, and Singapore formed a partnership called OS- 
Ione, which tests global OSI interoperability and 
demonstrates OSI internetworking at trade shows 
and special events around the world. 


Bell Communications Research (Bellcore) 
Bellcore, the R&D arm owned jointly by the Bell 
Operating Companies (BOCs), is the U.S.’s largest 
research consortium. Splintered from AT&T Bell 
Laboratories when AT&T was divested in 1984, its 
goal is to help make it possible for people anywhere 
in the world to communicate easily and securely in 
any medium or combination of media. Bellcore’s 
domain is the public switched telephone network, 
for which it devises standards and tests vendor 
products for compliance. Bellcore’s role is ex- 
tremely important: in the absence of a regulated 
telephone monopoly (the Bell system), someone or 
something must maintain a homogeneous nation- 
wide telephone network. In addition, the BOCs are 
not allowed to manufacture their own equipment 
and must purchase equipment from a variety of 
manufacturers. 
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Bellcore is active in public network specifica- 
tions for ISDN, fiber optics, network management, 
the intelligent network concept, and related topics. 
After Bellcore drafts network standards, it allows 
them to be reviewed by the industry at large. After 
modifications, the standards are then published as 
Technical References (TRs), which are listed in 
Bellcore’s annual Catalog of Technical Informa- 
tion. They can be ordered as complete documents 
at modest prices. 

Since its inception, Bellcore has been actively 
engaged in ISDN research and testing. It produces 
commercially available testbeds for ISDN protocol 
compatibility. It also publishes books and video- 
tapes on ISDN concepts, planning, and other 
ISDN topics. 


Standards Promotion & Application Group 
(SPAG) 

SPAG, the European equivalent of COS, was in- 
corporated in 1986. Its stated mission is to pave 
the way to an open international market for the 
computer and telecommunications industry, based 
on harmonized standards and testing and certifica- 
tion of OSI products. 

Like COS, SPAG concentrates its efforts on 
producing conformance testing, accrediting test 
laboratories, and certifying OSI products. SPAG 
has signed international agreements with COS and 
POSI to harmonize tools and testing technology. In 
1988, it signed a joint development agreement with 
COS to produce the Integrated Tool Set (ITS). The 
agreement also provided for reciprocal cross- 
licensing and distribution of test tools. 

In response to criticism that SPAG and COS 
were competing with tool developers and that test- 
ing was being conducted in a closed environment, 
SPAG developed the concept of OPEN Integrated 
Test Specification (OPEN ITS), an open approach 
to testing open systems. 


OSI Management 


Since the first draft of the seven-layer ISO model 
was produced in 1978, extensions to the basic 
model have been developed to more adequately 
represent all of the functions required by large- 
scale, multivendor networking environments. OSI 
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Management is an extension to the original refer- 
ence model that specifies transfer of network man- 
agement information in the Application Layer and 
support for network management functions at Lay- 
ers 4, 5, and 6. 


Advantages to OSI-Based Network 
| Management 
OSI-based network management continues to cap- 
ture attention as the premier solution for multiven- 
dor network management. Vendors such as AT&T, 
Digital, Hewlett-Packard, and NCR are now de- 
signing their network management architectures to 
accommodate OSI Management standards and 
protocols. 

In addition to solving the problem of manag- 
ing heterogeneous environments, OSI]-based net- 
work management will bring about a new 
phenomenon—unbundling network management 
from network products. In a proprietary environ- 
ment, a given vendor’s products are primarily 
manageable only by products developed by that 
vendor. Widespread use of OSI will split that one- 
to-one relationship, making it possible for any OSI- 
based network management system (NMS) to 
manage any OSI management-conformant device. 


Disadvantages to OSI-Based Network 
Management 

The market (both vendors and users) has widely 
criticized ISO for moving too slowly in its efforts 
to ratify OSI Management standards. Indeed, the 
greatest disadvantage to OSI-based network man- 
agement is that the demand for it far exceeds the 
available products—and vendors are wisely unwill- 
ing to develop products based on standards that 
are not yet final. In an effort to open the door to 
new OSI-based network management system prod- 
ucts, SC21 WG4 is currently working to finalize 
fault, configuration, performance, accounting, and 
security management specifications. These stan- 
dards will assist in differentiating OSI-based sys- 
tems from SNMP-based products. 

Another disadvantage to standards-based net- 
work management is that OSI standards merely 
provide a menu of options. There are numerous 
gaps and ambiguities in OSI Management stan- 
dards that could be interpreted differently, leading 


to incompatible implementations. Industry consen- 


sus is the only hope for interoperable implementa- 
tions. Currently, this consensus is building around 
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the OSI/Network Management Forum and the 
Network Management Special Interest Group 
(NMSIG) of the OIW, sponsored by NIST and the 
IEEE. The NMSIG is developing Implementation 
Agreements (IAs) based on emerging network man- 
agement standards. IAs are being introduced in 
phases that coincide with ISO/IEC standards as 
they progress from CD to international standards. 
The OIW NM Phase I JA became stable in Decem- 
ber 1990. To further simplify government procure- 
ment of network management products, NIST 
introduced a new proposal in May 1991, called the 
Government Network Management Profile 
(GNMP). GNMP will also be introduced in phases 
that will cross-reference the latest GOSIP versions. 
GNMP Phase I, II, and III will address the follow- 
ing categories of management information: 


e Phase I—IEEE 802 LAN standards, X.25, 
ISDN, FDDI, modems, multiplexers, bridges, 
and the physical link of the OSI model. 


e Phase II—protocol software operating in layers 
3 to 7, routers, terminal servers, MTAs, PBX, 
and circuit switches. 


e Phase IIJ—applications, services, operating sys- 
tems, computers, networks, and database man- 
agement systems. 


GNMP Phase I specifies CMIS/P, management 
definitions in GNMP secion 4, and five systems 
management functions: object management func- 
tion, state management function, attributes for rep- 
resenting relationships, alarm reporting, and event 
reporting. 

Since SNMP is already widely implemented, 
it is likely that SNMP will be deployed to manage 
routers. Future versions of GNMP will specify a 
network management architecture incorporating 
both SNMP and GNM P protocols. 


Standards Documents 
OSI Management standards can be broadly catego- 
rized into four areas: 


1. Functions—what network management Is, ac- 
cording to OSI 

2. Services—how network management functions 
are accomplished 

3. Information Structure—terms and categories 
describing what is managed (e.g., ““manage- 
ment information’’) 
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4. Protocols—describe means of transporting net- 
work management information 


Taken together, these four areas describe a generic 
package for network management systems, and 
how these products relate to the network devices 
they manage (called managed objects in OSI termi- 
nology). 

A blueprint document, OSI Management 
Framework (IS 7498-4), places the OSI Manage- 
ment environment in perspective by describing 
terms and the scope of OSI network management. 


OSI Management Functions 

OSI Management functions are described in the 
Systems Management standards (CD 10040, CD 
10164-1 through 10164-7, and N 10164-8 through 
10164-12). These documents are listed in Table 3 
and describe the scope of OSI Management using 
three models: 


1. The Organizational Model—describes ways 
OSI Management can be distributed adminis- 
tratively 


2. The Information Model—provides guidelines 
for defining managed objects and their interre- 
lationships, classes, and names 


3. The Functional Model—describes network 
management functions 


The Functional Model outlines how ISO has parti- 
tioned network management into five functional 
areas: fault management, configuration and name 
management, performance management, account- 
ing management, and security management. ISO 
originally described each of these areas in its own 
standard. Further studies revealed that functions 
overlapped; therefore, ISO reorganized the docu- 
ments in December 1988 into their present Sys- 
tems Management form. 

Fault management provides the detection, 
isolation, and correction of abnormalities in net- 
work operation. Configuration and Name Manage- 
ment facilities permit network managers to control 
the configuration of the system, network, or layer 
entities. Changed configurations may isolate faults, 
alleviate congestion, or meet changing user needs. 
Performance management enables the network 
manager to monitor and evaluate the performance 
of the system, network, and layer entities. Data 
from performance management may be used to 
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initiate configuration changes and diagnostic test- 
ing to allow a satisfactory level of performance. 
Accounting management facilities help determine 
and allocate costs for the use of a network manag- 
er’s communications resources. Security Manage- 
ment facilities permit the management of those 
services providing access protection of communi- 
cations resources. 


Services 

Services are described, in part, in the Common 
Management Information Services (CMIS) stan- 
dard, IS 9595. Services use primitives, or command 
types, to accomplish network management func- 
tions. Examples of primitives include INITIAL- 
IZE, EVENT-REPORT, and TERMINATE. While 
service primitives are somewhat abstract, they are 
important building blocks for real commands used 
by network management applications to obtain 
vital data on the status and activity of network de- 
Vices. 

CMIS includes a detailed abstract model of 
open systems management services. These fall into 
three categories—event notification, information 
transfer, and control. Event notification allows one 
system to notify another that some event of impor- 
tance has occurred. Information transfer consists 
of a single service element—Get. Control consists 
of three elements: Set, Action, and Compare. 


Information Structure 
The most important standards in this category are 
Structure of Management Information (SMI), Parts 
1,2, and 4(CD 10165-1, 2, and 4). (Part 3 is not 
missing; rather, ISO merged Part 3 into Part 4.) 
Included in these standards is an explanation of 
the object-oriented paradigm, used to model a net- 
work in terms of object classes and attributes. In 
object-oriented environments, a variable (for ex- 
ample, a variable called Modem) is defined both in 
terms of the operations that can be performed on it 
and the values of attributes it can possess. For ex- 
ample, Modem can have an attribute such as Sta- 
tus, which may have a value of Up or Down; a 
network management system may obtain this value 
via a Get operation or alter it via a Set operation. 
Objects (including their attributes and opera- 
tions) are stored in a Management Information 
Base (MIB), sometimes called a Management In- 
formation Library (MIL). The SMI documents just 
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listed provide syntax and semantics for informa- 
tion in the MIB; however, as yet no single ISO 
standard defines exactly what the OSI MIB will 
contain, nor how vendors and users will register 
objects in the standard MIB. SC21 WG4 is cur- 
rently working to finalize the Structure of Manage- 
ment Information (SMI), providing guidelines that 
can be used to define management objects and 
their attributes. The final SMI will ensure interop- 
erability among OSI-based network management 
systems. 

In the TCP/IP world, an Internet Standard 
MIB exists for objects managed using SNMP. This 
MIB functions in an analogous role to the pro- 
posed OSI MIB, although the administration and 
rules governing the two are sure to differ. 

MIB includes all information needed to make 
management decisions. MIB is a conceptual reposi- 
tory of all OSI management data in an OSI envi- 
ronment. The MIB concept does not imply any 
form of physical or logical storage for management 
information, however, and its implementation is 
outside the scope of OSI standards. Rather, the 
SMI defines the abstract syntax and the semantics 
of information so that it can be represented in OSI 
protocol exchanges. 


Protocols 

Common Management Information Protocol 
(CMIP), IS 9596, is the primary OSI Management 
protocol. CMIP specifies procedures for the ex- 
change of basic management information between 
open systems interconnected by OSI protocols. 
CMIP is intended to be a general-purpose manage- 
ment protocol suitable for the management of both 
OSI resources and the real resources used to pro- 
vide communications services. 


X.500—The Directory 

The Directory is a related standard designed to 
manage name-related information concerning pro- 
tocol layers and network nodes. These services con- 
nect the actual names used in the network with 
names and addresses understood by human users. 
The Directory is defined in CD 9594 and several 
other OSI working drafts. CD 9594 attained DIS in 
March 1988. 
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OSI and the Future 


OSI’s future as the premier means of interconnect- 
ing multivendor computer networks is almost a 
certainty. Too many government agencies, ven- 
dors, trade associations, and users have staked 
their futures on this architecture for it not to suc- 
ceed. OSI applications protocols, such as CCITT 
X.400, X.500, and EDI, are catching on and spur- 
ring OSI’s adoption. The world needs a network of 
computers, similar to standards for international 
telephony, to link users across oceans and conti- 
nents. OSI is perceived as the answer to this need. 

The OSI Reference Model has some glitches 
and holes, however, that prevent it from being 
widely implemented. In the U.S., OSI and TCP/IP 
proponents are badly divided. As an internetwork- 
ing protocol, TCP/IP has proved its worth and isa 
popular and commercially successful method of 
linking users across diverse networks—particularly 
LANs. OSI middle-layer protocols 3 through 5, the 
alternatives to TCP/IP, are neither as practical nor 
as simple to implement in the real world. Simple 
Network Management Protocol (SNMP), the net- 
work management protocol for TCP/IP networks, 
is also a proven, commercially successful solution. 
As long as vendors and users require practical net- 
working products, they will continue using TCP/ 
IP-based protocols—standards or not. 

Although nebody can predict the future, OSI 
will probably evolve to better serve user needs. A 
possible scenario for wider OSI acceptance is that 
OSI middle layers will migrate to resemble TCP/ 
IP, at least in functionality. One such implementa- 
tion already exists. A product called Xpress 
Transfer Protocol (XTP), a proprietary networking 
scheme from Protocol Engines, Inc. (Santa Bar- 
bara, CA), is a streamlined version of OSI’s middle 
layers. XTP combines OSI layers 3 and 4 into one 
protocol and has been officially proposed to AN- 
SI’s X3S3 Committee for adoption. 

In many commercial networking applications, 
however, vendors are blending different protocol 
stacks from different sources to match user needs. 
For instance, one vendor’s network protocol might 
graft together different layers from OSI, TCP/IP, 
and IBM’s SNA. 
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In reality, OSI and other layered architectures 
do not serve every application and are not a pana- 
cea. Proprietary architectures will continue to 
thrive alongside OSI-based networks, especially for 
closed user groups (where internetworking is not a 
requirement) or in time-sensitive applications in- 
tolerant of layered protocols’ high overhead. 
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All others who desire internetworking must 
realize that the associated protocols are still 
evolving—nothing 1s truly cast in iron. In market- 
based economies, products that do not satisfy mar- 
ket needs will not gain widespread favor. 
Therefore, prospective users must evaluate OSI 
protocols and their adoption with an eye toward 
future standards developments. Hi 
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